hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ramkrishna.s.vasudevan (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-7781) Update security unit tests to use a KDC if available
Date Mon, 23 Dec 2013 10:28:50 GMT

    [ https://issues.apache.org/jira/browse/HBASE-7781?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13855540#comment-13855540
] 

ramkrishna.s.vasudevan commented on HBASE-7781:
-----------------------------------------------

Pressed the button pretty early. 
When i try running the testMiniKDC as given in the hadoop JIRA,
{code}
Subject subject = new Subject(false, principals, new HashSet<Object>(),
              new HashSet<Object>());
      loginContext = new LoginContext("", subject, null,
              KerberosConfiguration.createClientConfig(principal, keytab));
      loginContext.login();
      subject = loginContext.getSubject();
     loginContext.login();
{code}
This works fine using similar principal.  But when going thro the UGI code it does not work.
 

> Update security unit tests to use a KDC if available
> ----------------------------------------------------
>
>                 Key: HBASE-7781
>                 URL: https://issues.apache.org/jira/browse/HBASE-7781
>             Project: HBase
>          Issue Type: Test
>          Components: security, test
>            Reporter: Gary Helmling
>            Assignee: ramkrishna.s.vasudevan
>            Priority: Blocker
>             Fix For: 0.98.0
>
>
> We currently have large holes in the test coverage of HBase with security enabled.  Two
recent examples of bugs which really should have been caught with testing are HBASE-7771 and
HBASE-7772.  The long standing problem with testing with security enabled has been the requirement
for supporting kerberos infrastructure.
> We need to close this gap and provide some automated testing with security enabled, if
necessary standing up and provisioning a temporary KDC as an option for running integration
tests, see HADOOP-8078 and HADOOP-9004 where a similar approach was taken.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Mime
View raw message